Jamf Cloud is a service offered by Jamf that allows you to host your Jamf Pro server in the Cloud.
For more information on each Jamf Cloud offering, see Jamf Cloud MDM.
Migration and Security FAQs
- How can I migrate my on-premise instance to Jamf Cloud?
- A Jamf Migration Specialist can help you migrate devices, data, and settings to a Jamf Cloud-hosted instance. For more information, see Cloud Services: Next Steps.
- How is Jamf Cloud secured?
- For information on Jamf's Security Policy and a Jamf Cloud security FAQ, see Information Security.
- What safelist or firewall modifications are required for Jamf Cloud communication?
- For information on Jamf's list of IP prefixes and fully qualified domain names (FQDNs) for safelists and firewalls, see Jamf Domains Safelist Reference and Permitting Inbound/Outbound Traffic with Jamf.
- Where can I view the status of Jamf Cloud?
- You can use the following website to view the status of Jamf Cloud, including in-progress upgrades and scheduled maintenance: https://status.jamf.com
You can also subscribe to receive email notifications when an incident with Jamf Cloud is created, updated, or resolved.
- Can I migrate between different Jamf Cloud environments?
- Migrations between different Jamf Cloud environments are available by contacting your Account team.
Time Zone and Region FAQs
- Where are the hosted data regions used by Jamf Cloud?
- For information about the hosted data regions used by Jamf Cloud, see the Jamf Cloud Hosted Data Region Information article.
- What time zone does Jamf Cloud use for logging?
- Jamf Cloud uses Coordinated Universal Time (UTC) to time stamp logs. Jamf Premium Cloud customers can request to change the logging time zone for their environments.
- How can I change the time zone for my Jamf Pro user account?
- To change the time zone on your Jamf Pro account, navigate to the Account settings in Jamf Pro and select your desired time zone from the Time Zone pop-up menu. In addition, you can change the date format and disable relative dates (e.g., "Today").
Upgrade FAQs
- Where can I find the upgrade schedule?
- The cloud upgrade schedule will be posted on Jamf Nation. Your Jamf Pro server, including any free sandbox environments, will be upgraded to the latest version based on your hosted data region. For more information about hosted data regions, see Jamf Cloud Hosted Data Region Information.
- Can I choose to upgrade early?
- Jamf Commercial Cloud environments are eligible for an upgrade before the scheduled release window. If you would like to upgrade early, navigate to https://account.jamf.com/products/jamf-pro and click Upgrade on the appropriate instance.
- The selected instance is not eligible for an early upgrade.
- You are attempting to upgrade the instance within 24 hours of scheduled mass upgrades.
- Shared library upgrades or other necessary infrastructure updates are being performed alongside the Jamf Pro upgrade.
Data and Access Management FAQs
- Where can I view and download the Jamf Pro server logs for my Jamf Cloud-hosted environment?
- The Jamf Pro Server Logs settings allow you to view and download the Jamf Pro server logs from the Jamf Pro web app. Server logs are time stamped using Coordinated Universal Time (UTC). For instructions, see Jamf Pro Server Logs in the Jamf Pro Documentation.
- Can I stream Jamf Pro server logs from my Jamf Cloud-hosted environment to another data collection endpoint?
- If you are a Jamf Premium Cloud customer, you can use Jamf Log Stream to forward JSSAccess and JamfChangeManagement logs to an Amazon S3 bucket, a Splunk instance, a custom HTTPS endpoint, or to Datadog.
Log files are sent to the specified endpoint in an uncompressed GZIP format. S3 Logs are synchronized every 15 minutes or when the log size reaches 10MB, whichever occurs first. Splunk, HTTPS and Datadog are synchronized every 2 minutes or when the log size reaches 10MB, whichever occurs first.
- How do I begin using Jamf Log Stream?
- Contact Jamf Support to enable Jamf Log Stream and do the following:
Specify which logs you would like to stream. JSSAccess and JAMFChangeManagement logs can be streamed.
Provide Jamf Support with one of the following:
The name of the Amazon S3 bucket you want to forward logs to
Your Splunk endpoint URL and authentication token
Your Datadog host and API key
Your HTTPS endpoint URL
Note:Jamf Log Stream supports on-premise SIEM with Splunk if an HTTPS endpoint is available and signed by a 3rd party SSL certificate. An on-premise SIEM HTTPS endpoint with a self-signed SSL certificate is not supported for Jamf Log Stream.
Due to an issue with a third-party plugin, Splunk customers must have the Enable indexer acknowledgment setting disabled.
In order to use S3 bucket encrypted with AWS Key Management Service, you must add the IAM role
arn:aws: iam::628897759306:role/jamflogs-<fqdn>to your KMS key policy. For assistance or more information, contact Jamf Support.
If you want to stream to an Amazon S3 bucket, assign the following policy to the S3 bucket:{ "Version": "2012-10-17", "Id": "PolicyID", "Statement": [ { "Sid": "StmtID", "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::628897759306:role/jamflogs-<fqdn>" }, "Action": [ "s3:GetBucketLocation", "s3:ListBucket", "s3:ListBucketMultipartUploads", "s3:AbortMultipartUpload", "s3:PutObject", "s3:PutObjectAcl", "s3:GetObject" ], "Resource": [ "arn:aws:s3:::<bucket-name>", "arn:aws:s3:::<bucket-name>/*" ] } ] }Note:Make sure to replace <bucket-name> with your own bucket name provided by Amazon.
Note:Do not assign this policy until after Jamf Support confirms that log streaming functionality has been enabled for your Jamf Pro instance
The specified logs will begin streaming to your data collection endpoint after your request has been processed and the policy is assigned.
- What settings are accessible for a Jamf Cloud-hosted instance?
- In addition to the standard Jamf Pro settings, you can access the following:
The Jamf Software Server log
The Jamf Change Management log
Enabling debugging in Jamf Pro
- What settings are not accessible for a Jamf Cloud-hosted instance?
- The following settings cannot be accessed in a Jamf Cloud-hosted instance:
Restarting Tomcat
MySQL queries and modifications
Environment resource allocations
HTTP debugging
If you need to access these settings, contact Jamf Support for assistance.